Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa
File: 4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa (raw, json)
Hash identifier: tjLnA4xx6xW2o8o0Nxj0RULJ3oVpDUty6jhv+XOFzV8=
Subject key identifier: E0:A9:3B:05:3E:06:3A:D5:F5:97:73:8A:9B:B8:DD:3C:02:94:84:5E
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019874D1955D5E520833BB4C1F183F446122
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa
Signing time: Mon 04 Aug 2025 11:22:28 +0000
ROA not before: Mon 04 Aug 2025 11:22:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42457
IP address blocks: 92.118.81.0/24 maxlen: 24
92.118.82.0/24 maxlen: 24
92.118.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:d1:95:5d:5e:52:08:33:bb:4c:1f:18:3f:44:61:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 4 11:22:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0a93b053e063ad5f597738a9bb8dd3c0294845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:d5:92:1a:4a:14:96:81:b0:7c:04:46:51:
d8:b7:b7:e9:e0:1c:c7:51:a6:34:9f:ea:21:bc:04:
bc:4f:d8:43:98:2a:09:44:f2:0c:94:c1:ba:3f:f2:
61:64:01:81:76:bf:35:d2:60:a1:57:02:ba:4e:76:
b9:8f:88:0e:15:9d:af:54:12:e0:cc:a1:70:b9:87:
40:96:85:db:ba:84:b7:c4:24:81:48:40:a5:17:2c:
64:87:94:62:f7:c1:0e:19:25:f2:05:31:2c:d3:62:
56:0d:91:51:85:5d:29:4b:a7:c2:9f:c4:68:92:0c:
64:50:ba:f0:6a:37:36:b5:f7:b2:27:4b:58:ad:6b:
b0:40:4b:db:91:43:05:66:8c:e1:b9:8a:32:62:dd:
52:c2:ff:6c:1c:57:26:25:81:a9:d9:72:74:a5:5f:
ea:99:93:c1:bd:16:36:07:5b:2c:6f:6b:f4:0a:4e:
14:49:27:d7:f3:59:6f:d6:50:a1:ff:43:b0:a4:e1:
a1:65:9d:9a:22:8b:68:e1:7e:f2:e4:9a:cd:5b:9b:
23:28:1c:8b:26:b7:ae:6e:3b:3c:03:c3:a3:ba:88:
1a:a4:84:8b:7f:6e:2c:92:b6:a2:f4:f5:dd:d6:1f:
88:ed:fe:87:fa:ee:73:bb:79:a0:d6:2e:df:ed:dc:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:3B:05:3E:06:3A:D5:F5:97:73:8A:9B:B8:DD:3C:02:94:84:5E
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.81.0-92.118.83.255
Signature Algorithm: sha256WithRSAEncryption
0f:16:d3:63:09:b0:46:fe:9c:0a:fb:75:21:80:c5:52:22:aa:
87:4a:9a:a1:b1:58:e7:a2:ac:28:29:70:ff:ab:7c:41:c3:63:
11:93:56:5b:bf:6c:66:73:18:9e:8c:22:21:a2:76:5b:40:e6:
a9:60:cc:b0:fd:ed:66:29:1c:79:05:b5:a3:51:3f:2a:60:43:
d7:64:c1:80:93:e2:de:d5:e8:bd:1d:b2:a0:54:1b:8d:2d:d5:
49:8a:95:f3:2c:ce:92:31:a5:c9:5e:9f:b0:20:40:f2:5a:19:
24:1c:b5:b1:03:83:33:c9:7a:37:00:1f:02:4e:c9:47:08:e5:
28:7c:c4:9f:6b:ac:a0:f8:18:12:7b:6e:1a:a2:f6:3b:17:68:
7e:96:46:84:f5:8e:83:e4:90:b1:c0:eb:35:4b:96:f9:8a:d5:
92:44:4d:9f:fa:b1:d1:0e:cf:91:1a:12:00:58:53:52:41:b3:
8d:96:64:cc:3e:26:e9:14:84:91:72:2a:30:c3:43:21:d4:7f:
1d:2a:56:33:3b:27:15:8a:37:25:93:b7:5a:1a:36:e6:38:3c:
77:a8:6a:af:ef:b9:69:62:0f:43:0c:ef:bb:5d:4e:3f:18:f7:
ff:a4:d9:c1:65:f2:1d:97:43:c7:a8:76:c0:55:f7:ef:e4:23:
45:a7:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 15:10:05 2025 by rpki-client